CVE Vulnerability Catalog

Cisco Nexus Dashboard engineering team conducted a comprehensive internal security review, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20326 are related to missing authentication for critical functions, grouped under CWE-306.

Cisco Nexus Dashboard engineering team conducted a comprehensive internal security review, resulting in a hardening release. The vulnerabilities tracked by CVE-2026-20325 are related to improper neutralization of special elements used in a command, grouped under CWE-77.

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root. This exists because a registered sftunnel peer has incorrect permissions to write an arbitrary file to any location on the device. An attacker can hijack the sftunnel connection or be a valid peer and send a command to write a malicious file that is executed with root privileges. Valid user credentials on the device are required.

Vulnerability in Cisco Nexus Dashboard is due to improper access control issues (CWE-284). It was discovered during an internal security review and addressed in a software hardening release.

Vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) allows an unauthenticated remote attacker to execute arbitrary commands as root. It is due to insecure deserialization of a user-supplied Java byte stream from a host in the external database access list.

Vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) is due to improper input validation issues (CWE-20). It was discovered during an internal security review and addressed in a hardening release.

Vulnerability in Cisco ISE allows an authenticated remote attacker with high-privileged admin credentials to execute arbitrary commands on the underlying OS. It is due to insecure deserialization of Java objects. Single-node deployments may experience DoS.

Vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) is due to incorrect resource transfer between spheres (CWE-669). It was discovered during an internal security review and addressed in a hardening release.

Vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) is due to improper access control issues (CWE-284). It was discovered during an internal security review and addressed in a hardening release.

Vulnerability in Cisco ISE allows an authenticated remote attacker with high-privileged admin credentials to execute arbitrary commands on the underlying OS. It is due to insufficient validation of user-supplied input. Single-node deployments may experience DoS.

Vulnerability in Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) is due to improper neutralization of special elements (CWE-74). It was discovered during an internal security review and addressed in a hardening release.

HP has identified and remediated multiple externally reported vulnerabilities in HPLIP. The vulnerabilities could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components and could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities in HPLIP. The vulnerabilities could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote code execution, privilege escalation, denial of service, information disclosure, or unauthorized file modification under certain conditions.